jaffacakes118_HEUR[.]Trojan[.]Win32[.]Generic[.]2a1fadc2d7f943c206854815020f6d12

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_HEUR.Trojan.Win32.Generic.2a1fadc2d7f943c206854815020f6d12
Size 212KB
Sample261014-avcadadh73
SHA256 337992fc0c54062ca30c9d70284efaacba7573d92a6398dfe5e61ad211436eca
MD5 2a1fadc2d7f943c206854815020f6d12
SHA1 c739a58b4441da4a363bae997f03392cab3735d6
SHA512 c83258a15f8f6a4067b080c1d611d5d67e62b8b79ad1a525213e57892edf7ebd1900e5e7cfeba23f418f32c22afc6e7074c3b43bf7d9d6386ed1a522ac7d94b2
SSDEEP 3072:gDB8o2xCusDDHNKgfpY5QRJiK6jet8JW7aendS3V6APsQU5FO2q:eFusDDHdS5Wt8cWendwl5gS
TLSH
T1EE248D1132D0C872D49210BA88B9CBF65A7B7832566659CBFBC40AFD4F356D2963930F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_HEUR.Trojan.Win32.Generic.2a1fadc2d7f943c206854815020f6d12

File Explorer

jaffacakes118_HEUR.Trojan.Win32.Generic.2a1fadc2d7f943c206854815020f6d12

.exe 212KB

jaffacakes118_HEUR.Trojan.Win32.Generic.2a1fadc2d7f943c206854815020f6d12

IMPHASH 7e2de04524742bbc93180e9b27de45d6
SHA256 337992fc0c54062ca30c9d70284efaacba7573d92a6398dfe5e61ad211436eca
MD5 2a1fadc2d7f943c206854815020f6d12
SHA1 c739a58b4441da4a363bae997f03392cab3735d6
SHA512 c83258a15f8f6a4067b080c1d611d5d67e62b8b79ad1a525213e57892edf7ebd1900e5e7cfeba23f418f32c22afc6e7074c3b43bf7d9d6386ed1a522ac7d94b2
SSDEEP 3072:gDB8o2xCusDDHNKgfpY5QRJiK6jet8JW7aendS3V6APsQU5FO2q:eFusDDHdS5Wt8cWendwl5gS
TLSH
T1EE248D1132D0C872D49210BA88B9CBF65A7B7832566659CBFBC40AFD4F356D2963930F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

37637

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

N:\down2.winsoft1.com\setup\p003_un1\setup.pdb

kernel32

lstrlenA lstrcatA lstrcpyA SetLastError GetLastError CreateRemoteThread GetProcAddress GetExitCodeProcess DuplicateHandle GetCurrentProcess ExpandEnvironmentStringsA CreateMutexA MoveFileA RemoveDirectoryA DeleteFileA CreateDirectoryA GetTempPathA GetCommandLineA GetModuleFileNameA GetLocalTime GetTickCount GetFileAttributesExA Sleep CreateThread WaitForSingleObject TerminateThread CloseHandle GetModuleHandleA WriteFile CompareStringW CompareStringA GetLocaleInfoW GetTimeZoneInformation ReadFile GetProcessHeap SetEndOfFile LoadLibraryA InterlockedExchange FreeLibrary SetConsoleCtrlHandler IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetDateFormatA GetTimeFormatA GetStringTypeW GetStringTypeA InitializeCriticalSectionAndSpinCount CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA FlushFileBuffers SetStdHandle SetFilePointer HeapReAlloc RtlUnwind RaiseException GetStartupInfoA HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement GetCurrentThreadId InterlockedDecrement GetCurrentThread TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EnterCriticalSection LeaveCriticalSection WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringA MultiByteToWideChar LCMapStringW HeapSize ExitProcess HeapAlloc GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime FatalAppExitA VirtualAlloc SetEnvironmentVariableA

advapi32

RegDeleteValueA RegOpenKeyExA RegQueryValueExA RegCreateKeyExA RegSetValueExA RegCloseKey RegOpenKeyA

shell32

ShellExecuteA

ole32

CoInitialize

oleaut32

SysFreeString

user32

wsprintfA

shlwapi

PathGetArgsA PathFileExistsA PathIsDirectoryA PathRemoveBlanksA PathFindFileNameA

ws2_32

closesocket __WSAFDIsSet select connect send recv ioctlsocket htons gethostbyname socket WSAStartup

netapi32

Netbios